-
Notifications
You must be signed in to change notification settings - Fork 21
Home
Do your users need admin access to install an application or make a system change, but your InfoSec policies don't allow for permanent admin rights? Well, you've come to the right place!
MakeMeAdminPy is an updated workflow modified from Andrina Kelly's JNUC2013 talk on "Making your users do your job". This updated workflow has been re-written in python and has added some additional features that were not available in the original version such as: * Remediate any new admin accounts that may have been created while the policy was in effect. * Remediate any specified Organizational Admin accounts that had their passwords modified.
This script was designed to be used in a Self Service policy to allow users to become temporary administrators on their system for the time specifed as 'adminTimer'. Once the timer reaches zero, the users admin rights will be revoked and the system will be checked for any admin accounts that may have been created during the 'adminTimer'. If a user created an admin account it will be logged and reported back to Jamf Pro and then the admin rights will be revoked for those newly created accounts.